From 79725b28cf8cdcf97eaf61b2e1c23529f7a6e527 Mon Sep 17 00:00:00 2001
From: Mike Macgirvin <mike@macgirvin.com>
Date: Sat, 10 Jul 2010 16:47:10 -0700
Subject: profile extra fields, profile deletion

---
 boot.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'boot.php')

diff --git a/boot.php b/boot.php
index 9dce8689e..2b608760c 100644
--- a/boot.php
+++ b/boot.php
@@ -190,7 +190,9 @@ function notags($string) {
 // The PHP built-in tag escape function has traditionally been buggy
 if(! function_exists('escape_tags')) {
 function escape_tags($string) {
-	return(str_replace(array("<",">","&"), array('&lt;','&gt;','&amp;'), $string));
+	return(str_replace(
+		array('&', '"', "'", '<', '>'), 
+		array('&amp;', '&quot;', '&apos;', '&lt;', '&gt;'), $string));
 }}
 
 if(! function_exists('login')) {
-- 
cgit v1.2.3